requirements_unix_test.go 2.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117
  1. // +build !windows
  2. package main
  3. import (
  4. "bytes"
  5. "io/ioutil"
  6. "os/exec"
  7. "strings"
  8. "github.com/docker/docker/pkg/parsers/kernel"
  9. "github.com/docker/docker/pkg/sysinfo"
  10. )
  11. var (
  12. // SysInfo stores information about which features a kernel supports.
  13. SysInfo *sysinfo.SysInfo
  14. )
  15. func cpuCfsPeriod() bool {
  16. return testEnv.DaemonInfo.CPUCfsPeriod
  17. }
  18. func cpuCfsQuota() bool {
  19. return testEnv.DaemonInfo.CPUCfsQuota
  20. }
  21. func cpuShare() bool {
  22. return testEnv.DaemonInfo.CPUShares
  23. }
  24. func oomControl() bool {
  25. return testEnv.DaemonInfo.OomKillDisable
  26. }
  27. func pidsLimit() bool {
  28. return SysInfo.PidsLimit
  29. }
  30. func kernelMemorySupport() bool {
  31. return testEnv.DaemonInfo.KernelMemory
  32. }
  33. func memoryLimitSupport() bool {
  34. return testEnv.DaemonInfo.MemoryLimit
  35. }
  36. func memoryReservationSupport() bool {
  37. return SysInfo.MemoryReservation
  38. }
  39. func swapMemorySupport() bool {
  40. return testEnv.DaemonInfo.SwapLimit
  41. }
  42. func memorySwappinessSupport() bool {
  43. return SameHostDaemon() && SysInfo.MemorySwappiness
  44. }
  45. func blkioWeight() bool {
  46. return SameHostDaemon() && SysInfo.BlkioWeight
  47. }
  48. func cgroupCpuset() bool {
  49. return testEnv.DaemonInfo.CPUSet
  50. }
  51. func seccompEnabled() bool {
  52. return supportsSeccomp && SysInfo.Seccomp
  53. }
  54. func bridgeNfIptables() bool {
  55. return !SysInfo.BridgeNFCallIPTablesDisabled
  56. }
  57. func bridgeNfIP6tables() bool {
  58. return !SysInfo.BridgeNFCallIP6TablesDisabled
  59. }
  60. func unprivilegedUsernsClone() bool {
  61. content, err := ioutil.ReadFile("/proc/sys/kernel/unprivileged_userns_clone")
  62. return err != nil || !strings.Contains(string(content), "0")
  63. }
  64. func ambientCapabilities() bool {
  65. content, err := ioutil.ReadFile("/proc/self/status")
  66. return err != nil || strings.Contains(string(content), "CapAmb:")
  67. }
  68. func overlayFSSupported() bool {
  69. cmd := exec.Command(dockerBinary, "run", "--rm", "busybox", "/bin/sh", "-c", "cat /proc/filesystems")
  70. out, err := cmd.CombinedOutput()
  71. if err != nil {
  72. return false
  73. }
  74. return bytes.Contains(out, []byte("overlay\n"))
  75. }
  76. func overlay2Supported() bool {
  77. if !overlayFSSupported() {
  78. return false
  79. }
  80. daemonV, err := kernel.ParseRelease(testEnv.DaemonInfo.KernelVersion)
  81. if err != nil {
  82. return false
  83. }
  84. requiredV := kernel.VersionInfo{Kernel: 4}
  85. return kernel.CompareKernelVersion(*daemonV, requiredV) > -1
  86. }
  87. func init() {
  88. if SameHostDaemon() {
  89. SysInfo = sysinfo.New(true)
  90. }
  91. }